Block Viruses

Message Security for Google Apps -- the integrated version of Postini -- is no longer available for sale or activation. Existing customers are still being supported, but they will be transitioned during the next few months to the new email management features in the Google Admin console. For more details about the new features and the transition, see the FAQs, the Transition Guide, and Add email settings to an organization.

By default, your Message Security and Message Discovery services automatically:

  • Bounce (return to the sender) any inbound virus-infected messages sent to your users.
  • Delete any virus-infected messages sent to a recipient that doesn't match an account on the Message Security and Message Discovery service (a feature called Non-Account Virus Blocking).
  • Bounce (return to the sender) any outbound (and internal-only) virus-infected messages that your users send to others. This setting ensures that users don't send virus-infected messages to customers, partners, and associates.

As an administrator, you can change these and other default settings; however, we strongly recommend that you leave them as is.

Settings you can change

For individual user accounts:

Turn Inbound Virus Blocking on or off. You can change this setting by editing individual user accounts.

For all accounts in a user organization:

  • Change the disposition for Inbound Virus Blocking. Specifies how the service handles virus-infected messages. For example, you can quarantine messages instead of bounce them. The default setting is Bounce.
  • Turn Non-Account Virus Blocking on or off. Prevents virus-infected messages from being delivered or archived, if you've set up Google Apps Email routing to accept messages sent to "unknown addresses." The default setting is On.
  • Turn the Early Detection Quarantine on or off. Tells your Message Security or Message Discovery service to block any messages that may contain a virus but for which the virus filters don't yet have a matching virus signature (often called "zero-hour" viruses). Because new viruses are often embedded in common types of executable files, Early Detection blocks any messages with an executable file, such as .exe and .vbs. Blocked messages are placed in the Pending quarantine in the Message Center for 8 hours, and then are re-scanned by updated virus filters. If the filters find a virus in a message, Early Detection moves it to the Virus quarantine; otherwise, it releases the message. The default setting is Off.
  • Turn Outbound Virus Blocking on or off. This setting also applies to internal-only messages—that is, messages that users send to other users at your company. The default setting is On, with the disposition

How to...

Turn Inbound Virus Blocking on or off for a user
  1. Access the Administration Console:
    1. Sign in to the Google Admin console
    2. On the Google Apps dashboard, click Postini services.
    3. Click System Administration.
  2. On the Administration Console Home page, in the User Shortcut form, type the user's email address.

     

  3. Click View Settings.
  4. On the User Overview page, under the Inbound Services section, click Virus Blocking.

     

  5. Turn Virus Blocking On or Off.

Want more information? See the Message Security and Message Discovery Administration Guide for details.



Change Inbound Virus Blocking settings for an organization
  1. Access the Administration Console:
    1. Sign in to the Google Admin console
    2. On the dashboard, click Postini services.
    3. Click System Administration.
  2. In the Administration Console, go to Orgs and Users > Orgs, and then select the users organization.

     

  3. On the Organization Management page, under the Inbound Services section, click Virus Blocking.
  4. On the Inbound Virus Blocking page:
    • Set Non-Account Virus Blocking to On or Off.
    • Set Early Detection Quarantine to On or Off. If you turn on this option, you must accept the Confidentiality Waiver.
    • Note that Virus Cleaning is a legacy feature and has no effect.
  5. Set the Virus Disposition as desired. You can bounce virus-infected messages (return them to the sender) or send them to a quarantine (the administrator's quarantine or individual users' quarantines in the Message Center).
  6. Click Save.

If you turned on the Early Detection Quarantine, ensure that you:

  • Set users' privileges for the Pending Quarantine in the Message Center. Learn more
  • Turn on the Early Detection notification for users. Learn more

Want more information? See the Administration Guide for details.



Change Outbound Virus Blocking settings for an organization
  1. Access the Administration Console:
    1. Sign in to the Google Admin console.
    2. On the Google Apps dashboard, click Postini services.
    3. Click System Administration.
  2. In the Administration Console, go to Orgs and Users > Orgs, and then select the users organization.

     

  3. On the Organization Management page, under the Outbound Services section, click Virus Blocking.
  4. On the Outbound Virus Blocking page:
    • Set Virus Blocking to On or Off.
    • Set the Virus Disposition as desired. You can bounce virus-infected messages (return them to the sender) or send them to an administrator's quarantine (accessible in the Message Center).
  5. Click Save.

Want more information? See the Administration Guide for details.